Deano_Rules Posted July 21, 2009 Posted July 21, 2009 HI I have a WUS server running Windows Server 2008. I am trying to apply a gpo to all clients to automatically update from the server. The gpo is on a windows 2003 platform. I have been able to get the clients to download the updates and notify the user to install updates. When I chose the option "4 auto download and install at scheduled time" they do nothing. The client does not even download the updates or register on the WUS server. The gpo I have applied at the moment had the following enabled and set up - configure automatic updates, specify intranet Microsoft update service location, automatic updates detection frequency, allow non-administrators to receive update notifications. Any Ideas? Dean
Michael Posted July 21, 2009 Posted July 21, 2009 It sounds to me this is possibly a new setup? Are all the update files downloaded? When you load the WSUS 3.0 console it displays on the startup screen whether any updates are required under 'Download Status'. This is what settings I use to setup WSUS
ricki Posted July 21, 2009 Posted July 21, 2009 Hi Have you also tried the proxycfg -u on the machines to update the windows update proxy. I have to apply this with a script at start up. Also have a look at Microsoft Windows Server Update Services Tools and Utilities and try the server and client diagnostic tools, Richard
Deano_Rules Posted July 24, 2009 Author Posted July 24, 2009 Hi I have tried both with no luck. The Updates are downloaded and have been approved on the WUS server. Does anyone know of any gpo that may block automatic updates? Any other ideas would be great. Thanks Dean
Michael Posted July 24, 2009 Posted July 24, 2009 Paste this into Notepad and save as WSUSReset.bat: @echo off TITLE Logistix WSUS Reset Authorisation Echo This batch file will do the following: Echo 1. Stops the wuauserv service Echo 2. Deletes the AccountDomainSid registry key (if it exists) Echo 3. Deletes the PingID registry key (if it exists) Echo 4. Deletes the SusClientId registry key (if it exists) Echo 5. Restarts the wuauserv service Echo 6. Resets the Authorization Cookie Echo 6. More information on http://msmvps.com/Athif Pause @echo on net stop wuauserv REG DELETE "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate" /v AccountDomainSid /f REG DELETE "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate" /v PingID /f REG DELETE "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate" /v SusClientId /f net start wuauserv wuauclt /resetauthorization /detectnow Pause Reboot the machine and see if this makes any difference. You're not by chance running an RM network are you as the workstations are deliberately modified so it won't talk to a WSUS server by default. It deletes some vital registry entries.
denon101 Posted July 24, 2009 Posted July 24, 2009 Are you sending out office 2003 sp3 updates?? I had a problem with WSUS 3.0 when I approved sp3. Nothing would download at all. I trawled google and found that if you approve sp1 then decline the update everything starts to work. I did that and then manually did wuauclt /detectnow and all the updates started working like magic. Turns out that microsoft did something to sp1 and it messed with the updates. You could try that
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now